Where we're going
Scams reach people as fake websites, emails, texts, social accounts, apps and changed bank details. Today Sixth finds fake websites, gets them taken down and answers the messages people forward. The rest is below, in the order we're building it.
Running now works today. Pilot we're building with our founding clients. Planned comes after the pilot.
The idea
Everything Sixth sees goes into one engine: fake websites found for one client, scam emails caught in another's inbox, messages people forward to Scam Check. A fake link found anywhere is watched for every client it copies, and blocked once it's confirmed. Each new client, and each new kind of message we check, lets Sixth see more, sooner, for the rest.
AI does the watching, checking and chasing. A person decides anything sent outside Sixth. As the AI's record against those decisions grows, it earns the right to act alone on clear-cut cases, one action at a time.
The Scams Prevention Framework codes, starting no earlier than 31 March 2027, will ask banks and telcos to watch for impersonation and have fakes removed quickly. Sixth keeps the dated record that shows it was done.
Every module has a published price. Every feature on this site says whether it runs today or is still being built, and it moves across on the day it ships.
What a client gets from the first day.
Lookalike Watch
Every new security certificate and newly registered web address is compared with the brands we watch. AI opens each lookalike, takes a screenshot and sets the real copies apart from businesses with similar names.
Running now
Takedowns
We ask the host and the registrar to remove each fake and follow up until it's gone, and report it to Google and Microsoft so their browsers warn people. AI reads every reply.
Running now
Alerts and blocking
An email for each confirmed fake with its evidence, and a live list of your fakes that your firewall or DNS filter fetches and blocks.
Running now
Monthly record
On the 1st of each month, a PDF of what we found, what we asked to be removed and how long each fake stayed up.
Running now
Logins for your team
Your people sign in with their own email to see your confirmed fakes, their evidence and their progress.
Running now
Scam Check
People in our trial group forward a suspicious email or a screenshot of a text and get a verdict with the reasons. Every fake link they send is watched for every client.
Running now
Founding clients get them first, at founding-client prices.
AI acting alone
When the AI is sure a site is a fake of your brand, it will alert you and add it to your blocking list on its own. It runs in shadow today: every call it would make is measured against a person's decision, and it switches on only when that record earns it.
Pilot
Inbox Watch
AI will check every new email in Google Workspace or Microsoft 365, move the scams out of the inbox and tell the person why. Watch-only trials are running on both now.
Pilot
Payment Watch
It will check bills in Xero or MYOB for changed bank details, and we'll call the supplier on a number we already trust before you pay. It's designed so that no AI model sees your bank transactions.
Pilot
Social and app watch
AI will score new social media profiles and app store listings for how closely they copy you.
Pilot
Customer Reports desk
Your customers will forward suspicious messages to an address with your name on it and get an answer in about a minute.
Pilot
Who sends email as you
The DMARC reports your email providers already keep, sent to Sixth, so you see who sends email as you and who is faking it.
Pilot
Scam phone numbers
AI will pick out the phone numbers in scam messages that use your name, ready to report to the phone companies.
Pilot
Guardian
For families: Guardian will watch for the payments scammers ask for, such as a large first payment to a new account, and alert someone the family trusts.
Pilot
Also being built: report buttons for Outlook and Gmail, breach alerts and self-serve plans. Every module and its price
Some need a lawyer's check first. Some wait for the first client who asks.
AI in Australia
We'll run our AI models through AWS in Sydney and Melbourne, so the text they read stays in Australia and the company that makes the models can't see it. Today they run outside Australia, mainly in the United States.
Planned
Certification
ISO 27001 certification and an assessment against the Australian Government's Essential Eight, so your security team has the evidence it asks for.
Planned
Industry sharing
Every confirmed fake shared through the anti-phishing industry's exchange, so email providers and security companies block it too. Today we report each one to Google and Microsoft.
Planned
Takedowns in your name
Takedown requests sent in your organisation's name, and trade-mark requests to remove a lookalike before anything harmful goes live on it.
Planned
Threat feed
Sixth's scam websites as a live feed for telcos and SMS senders, to block links in messages before they reach people.
Planned
Partner offers
Banks and other organisations offering Sixth's protection to their own customers.
Planned
How we choose what's next
We build the Pilot features in the order our founding clients need them. Anything that acts in a client's name, or reads live bank data, waits for a lawyer's review first. When a feature ships, it moves to Running now on this site the same day.
We're taking on founding clients and partners now.